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The Cassels-Tate pairing 
on polarized abelian varieties 

By Bjorn Poonen and Michael Stoll* 
Abstract 

Let {A, A) be a principally polarized abelian variety defined over a global 
field k, and let III(A) be its Shafarevich-Tate group. Let UI(A)nd denote 
the quotient of ILI(j4) by its maximal divisible subgroup. Cassels and Tate 
constructed a nondegenerate pairing 

m{AU^m{AU^Q/z. 

If A is an elliptic curve, then by a result of Cassels the pairing is alternating. 
But in general it is only antisymmetric. 

Using some new but equivalent definitions of the pairing, we derive gen- 
eral criteria deciding whether it is alternating and whether there exists some 
alternating nondegenerate pairing on UI(74)nd- These criteria are expressed in 
terms of an element c E UI(A)nd that is canonically associated to the polar- 
ization A. In the case that A is the Jacobian of some curve, a down-to-earth 
version of the result allows us to determine effectively whether ^U1{A) (if 
finite) is a square or twice a square. We then apply this to prove that a posi- 
tive proportion (in some precise sense) of all hyperelliptic curves of even genus 
g > 2 over Q have a Jacobian with nonsquare #111 (if finite). For example, it 
appears that this density is about 13% for curves of genus 2. The proof makes 
use of a general result relating global and local densities; this result can be 
applied in other situations. 
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1. Introduction 

The study of the Shafarcvich-Tatc group 111(74) of an abelian variety A 
over a global field k is fundamental to the understanding of the arithmetic of 
A. It plays a role analogous to that of the class group in the theory of the 
multiplicative group over an order in k. Cassels [Ca], in one of the first papers 
devoted to the study of DI, proved that in the case where E is an elliptic curve 
over a number field, there exists a pairing 

UI{E) X U1{E) — ^ Q/Z 

that becomes nondegenerate after one divides III(£') by its maximal divisible 
subgroup. He proved also that this pairing is alternating; i.e., that {x,x) = 
for all X. If, as is conjectured, in(£') is always finite, then this would force its 
order to be a perfect square. Tate [Ta2] soon generalized Cassels' results by 
proving that for abelian varieties A and their duals in general, there is a 
pairing 

UI{A) X m(A^) Q/Z, 

that is nondegenerate after division by maximal divisible subgroups. He also 
proved that if UI(^) is mapped to III(A'^) via a polarization arising from a 
k-rational divisor on A then the induced pairing on III(^) is alternating. But 
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it is known that when dim A > 1, a A;-rational polarization need not come from 
a fc-rational divisor on A. (See Section 4 for the obstruction.) For principahy 
polarized abelian varieties in general,lil Flach [Fl] proved that the pairing is 
antisymmetric, by which we mean {x, y) = —{y, x) for all x, y, which is slightly 
weaker than the alternating condition. 

It seems to have been largely forgotten that the alternating property was 
never proved in general: in a few places in the literature, one can find the claim 
that the pairing is always alternating for Jacobians of curves over number fields, 
for example. In Section 10 we will give explicit examples to show that this is 
not true, and that #III( J) need not be a perfect square even if J is a Jacobian 
of a curve over Q.BI 

One may ask what properties beyond antisymmetry the pairing has in 
the general case of a principally polarized abelian variety [A, A) over a global 
field k. For simplicity, let us assume here that III(^) is finite, so that the 
pairing is nondegenerate. Flach's result implies that x i— > {x,x) is a homomor- 
phism III(A) — > Q/Z, so by nondegeneracy there exists c G III(^) such that 
{x^x) = (x,c). Since Flach's result implies 2{x,x) = 0, we also have 2c = 
by nondegeneracy. It is then natural to ask, what is this element c G III(A)[2] 
that we have canonically associated to {A,X)? An intrinsic definition of c is 
given in Section 4, and it will be shown! that c vanishes (i.e., the pairing is 
alternating) if and only if the polarization arises from a /c-rational divisor on A. 
This shows that Tate's and Flach's results are each best possible in a certain 
sense. 

Our paper begins with a summary of most of the notation and terminology 
that will be needed, and with two definitions of the pairing. (We give two more 
definitions and prove the compatibility of all four in an appendix.) Sections 4 
and 5 give the intrinsic definition of c, and show that it has the desired property. 
(Actually, we work a little more generally: A is not assumed to be principal, 
and in fact it may be a difference of polarizations.) Section 6 develops some 
consequences of the existence of c; for instance if A is principally polarized and 
Ill(yl) is finite, then its order is a square or twice a square according as (c, c) 
equals or ^ in Q/Z. We call A even in the first case and odd in the second 
case. 



^Actually Flach considers this question in a much more general setting. 

■^This is perhaps especially surprising in light of Urabe's recent results [Ur], which imply, for 
instance, for the analogous situation of a proper smooth geometrically integral surface X over a finite 
field k of characteristic p, that if the prime-to-p part of Br(X) is finite, the order of this prime-to-p 
part is a square. (There exist "examples" of nonsquare Brauer groups in the literature, but Urabe 
explains why they are incorrect.) See Section 11 for more comments on the Brauer group. 

•^The statement of this result needs to be modified slightly if the finiteness of 111(^4) is not 
assumed. 
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The main goal of Sections 7 and 8 is to translate this into a more down- 
to-earth criterion for the Jacobian of a genus g curve X over k: (c, c) = N/2 
G Q/Z where N is the number of places v of k for which X has no /c^,-rational 
divisor of degree g — 1- Section 9 applies this criterion to hyperelliptic curves 
of even genus g over Q, and shows that a positive proportion pg of these (in 
a sense to be made precise) have odd Jacobian. It also gives an exact formula 
for Pg in terms of certain local densities, and determines the behavior of pg as 
g goes to infinity. The result relating the local and global densities is quite 
general and can be applied to other similar questions. Numerical calculations 
based on the estimates and formulas obtained give an approximate value of 
13% for the density p2 of curves of genus 2 over Q with odd Jacobian. 

Section 10 applies the criterion to prove that Jacobians of certain Shimura 
curves are always even. It gives also a few other examples, including an explicit 
genus 2 curve over Q for whose Jacobian we can prove unconditionally that 
(c, c) = ^ and III = Z/2Z, and another for which III is finite of square order, 
but with ( , ) not alternating on it. 

Finally, Section 1 1 addresses the analogous questions for Brauer groups of 
surfaces over finite fields, recasting an old question of Tate in new terms. 

2. Notation 

Many of the definitions in this section are standard. The reader is encour- 
aged to skim this section and the next, and to proceed to Section 4. 
If S is a set, then 2*^ denotes its power set. 

Suppose that M is an abelian group. For each n > 1, let M[n] = 
{m e M : nm = 0}. Let Mtors = UJ^Li M[n] = 0pM(p), where for each 
prime p, M{p) = [Jn^i Afip""] denotes the p-primary part of the torsion sub- 
group of M. Let M(jiv be the maximal divisible subgroup of M; i.e., m is in 
Mdiv if and only if for all n > 1 there exists x G M such that nx = m. De- 
note by Mnd the quotient M/M^^y. (The subscript nd stands for "nondivisible 
part.") If 

( , ):MxM' — > Q/Z 

is a bilinear pairing between two abelian groups, then for any m £ M, let 
m-*- = {m' G M' : (m,m') = 0}, and for any subgroup V C M, let V-^ = 
Clv&v When M = M', we say that ( , ) is antisymmetric if (a, b) = —{b, a) 
for all a,b £ M, and alternating if (a, a) = for all a G M. Note that a 
bilinear pairing ( , ) on M is antisymmetric if and only if m t— > (m, m) is a 
homomorphism. If a pairing is alternating, then it is antisymmetric, but the 
converse is guaranteed on M{p) only for odd p. 
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If is a field, then k and /c'^^p denote algebraic and separable closures, 
and Gk = Gal(A;/A;) = GaI(A;'^'^P/A;) denotes its absolute Galois group. If A; is a 
global field, then denotes the set of places of k. If moreover v € M^, then 
ky denotes the completion, and G„ = Gal{k^^^ /ky) denotes the absolute Galois 
group of ky. 

Suppose that G is a profinite group acting continuously on an abelian 
group M. We use C^G.M) (resp. Z\G,M) and H'{G,M)) to denote the 
group of continuous z-cochains (resp. i-cocyles and i-cohomology classes) with 
values in the G-module M. If k is understood, we use G^{M) as an abbreviation 
for C'{Gk,M), and similarly for Z'{M) and W{M). If a G C*(Gfc,M), then 
ay € C^{Gy, M) denotes its local restriction.! If f is a place of a global field, we 
use inv^ to denote the usual monomorphism H^{Gy, k^^"^*) = Br(A;^,) Q/Z 
(which is an isomorphism if v is nonarchimedean) . 

Varieties will be assumed to be geometrically integral, smooth, and pro- 
jective, unless otherwise specified. If X is a variety over k, let k{X) de- 
note the function field of X. If X is a field extension of k, then Xx de- 
notes X K, the same variety with the base extended to Specif. Let 
Div(X) = i7°(Gfc,Div(Xfc=op)) denote the group of (/c-rational) Weil divisors 
on X. If / G k{X)* or / e k{X)*/k*, let (/) E Div(X) denote the associ- 
ated principal divisor. If Z) e Div(X x Y), let *D € Div(y x X) denote its 
transpose. Let Pic(X) denote the group of invertible sheaves (= line bundles) 
on X, let Pic'^(XfcsGp) denote the subgroup of Pic(Xfcsep) of invertible sheaves 
algebraically equivalent to 0, and let Pic'^(X) = Pic(X) n Pic*^ (X^scp ) . In older 
terminology, which we will find convenient to use on occasion, {P\c{Xkscp)) 
is the group of fc-rational divisor classes, and Pic(X) is the subgroup of divisor 
classes that are actually represented by fc-rational divisors. Define the Neron- 
Severi group NS(X) = Pic(X)/Pic°(X). If D G Div(X), let C{D) E Pic(X) 
be the associated invertible sheaf. Let Div''(X) be the subgroup of Div(X) 
mapping into Pic'^(X). If A G i7''(NS(Vfcscp)), let Picyy^ denote the component 
of the Picard scheme Picy/^ corresponding to A. If k has characteristic p > 0, 
and dimy > 2, then these schemes need not be reduced [A/lul, Lect. 27], but in 
any case the associated reduced scheme Picy/fcj,gj is a principal homogeneous 
space of the Picard variety Picyy^ ^.g^, which is an abelian variety over k. Also, 

Picyy^ red(^'^'''') equals the preimage of A under Pic(Vfcscp) — s- NS(Vfcs°p) with its 
Gfc-action. 

Let Z{X) (resp. Z'^{X)) denote the group of 0-cycles on X (resp. the set 
of 0-cycles of degree i on X). For any z € Z, let Alb^^^ denote the degree i 



*We will be slightly sloppy in writing this, because we often will intend the "M" in C'^{Gk, M) 
to be a proper subgroup of the "M" in C^{Gv, M); for instance these two M's may be the fc^^P-points 
and fc^'^'^-points of a group scheme A over k, in which case we abbreviate by C'{Gk, A) and C''{Gv, A) 
even though the two A's represent different groups of points. 
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component of the Albanese scheme. Let y^[X) denote the kernel of the natural 
map Z^{X) — > Alb^^j^.(A;). Then Alb^^j^. is a principal homogeneous space of 
the Albanese variety Alb^^^ and its fc-points correspond (Gj^-equivariantly) to 
elements of Z'(X^) modulo the action of y'^{Xj). 

If X is a curve (geometrically integral, smooth, projective, as usual) and 
i G Z, let Pic*(X) denote the set of elements of Pic(X) of degree i, and let 
^^^x/k degree i component of the Picard scheme, which is a principal 

homogeneous space of the Jacobian Pic^/j. of X. (Since dimX = 1, these 
are already reduced.) Points on Pic^^^^. over k correspond to divisor classes 
of degree i on X-j^. It will be important to keep in mind that the injection 
Pic*(X) — > Pic^^^(fc) is not always surjective. (In other words, fe-rational 
divisor classes are not always represented by fc-rational divisors.) 

If A is an abelian variety, then = Pic^^^ ^^^j = Pic^/k denotes the dual 
abelian variety. If X is a principal homogeneous space of A, then for each 
a G A{k), we let ta denote the translation-by-a map on X, and similarly if 
X G X(k), then tx is the trivialization A ^ X mapping to x. If D € DivA, 
let Dx = UD e DivX. (Note: if a G A{k), then t^D = D_a-) If >C G PicX, 
then (pc. denotes the homomorphism A A^ mapping a to tic® C-^. (There 
is a natural identification P'^c^x/k ~ ^ •) We may also identify (j)c with the 
class of £ in NS(X). If D G DivX, then we define (f)D = <t>c(D)- ^ polarization 
on A (defined over k) is a homomorphism A A^ (defined over k) which over 
^sep equals (f)c for some ample C G Pic(Xfcsep). (One can show that this gives 
the same concept as the usual definition, in which k is used instead of A;®^^.) 
A principal polarization is a polarization that is an isomorphism. 

If A is an abelian variety over a global field A;, then let in(A) = III(/c, A) 
be the Shafarevich-Tate group of A over k, whose elements we identify with 
locally trivial principal homogeneous spaces of A (up to equivalence). 

Suppose that V and W are varieties over a field k, and that D is a divisor 
onVxW. If V G V{k), let D{v) G Div(l^^) be the pullback of D under the map 
W sending w to (v , w), when this makes sense. For a G -2(V^), define 

-D(a) G Div(VF^) by extending linearly, when this makes sense. If a G y^{V-i^ 
and D{a) is defined, then D{a) = (/) for some function / on W . (See the 
proof of Theorem 10 on p. 171 of [Lai, VI, §4].) If in addition a' G Z^iW-^), 
and if /(o') is defined, we put D{a, a') = f{a') and say that D{a, a') is defined. 
If a G y'^iVj^) and a' G 3^'^(W^), then we may interchange V and W to try to 
define *D(a',a), and Lang's reciprocity law (p. 171 of [Lai] again) states that 
D{a, a') and *D{a', a) are defined and equal, provided that a x a' and D have 
disjoint supports. 

We let /Xoo denote the standard Lebesgue measure on R*^, and let Hp 
denote the Haar measure on normalized to have total mass 1. For v = 
{vi,V2, ■ ■ ■ ,Vd) G Z*^, define \v\ := maxj \vi\. If S" C Z*^, then the density of S is 
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defined to be 

p{S) := I^J2N)-'' J2 1' 

veS,\v\<N 

if the limit exists. Define the upper density 'p{S) and lower density p{S) simi- 
larly, except with the limit replaced by a limsup or liminf, respectively. 

We will use the notation A'^ and P'^ for d-dimensional affine and projective 
space, respectively. 

3. Two definitions of tlie Cassels-Tate pairing 

In this section, we present the two definitions of the Cassels-Tate pairing 
used here. The first is well-known [Mi4]. The second appears to be new, but 
it was partly inspired by Remark 6.12 on page 100 of [Mi4]. In an appendix 
we will give two other definitions, and show that all four are compatible. 

3.1. The homogeneous space definition. Let A be an abelian variety over 
a global field k. Suppose a G U1{A) and a' G III(A'~^). Let X be the (lo- 
cally trivial) homogeneous space over k representing a. Then Pic°(Xfcscp) is 
canonically isomorphic as G^-module to Pic'^(^fcscp) = ^^(/c'^'^p), so that a' 
corresponds to an element of H^(Pic^{Xkscp)), which we may map to an ele- 
ment b' G H'^{k^^^{X)* /k^'^^*) using the long exact sequence associated with 

-fcir ' DivO(Xfcscp) PicO(Xfc.cp) 0. 

Since i?3(A;sep*) ^ 0, we may lift h' to an element /' G H^{Gk, k''''P{X)*). 
Then it turns out that G H'^{Gv,k^^^{X)*) is the image of an element 
G H'^{G^, fc^^P*).! We define 

{a,a) = ^ inv^(ci,) G Q/Z. 

See Remark 6.11 of [Mi4] for more details. The obvious advantage of this 
definition over the others is its simplicity. 

If A : ^ — > A"^ is a homomorphism, then we define a pairing 

( , )a : m(^) X m(^) Q/Z 

by (a, 6) A = {a,Xb). 

3.2. The Albanese-Picard definition. Let 1^ be a variety (geometrically 
integral, smooth, projective, as usual) over a global field k. Our goal is to 



^Onc can compute Ci, by evaluating at a point in X(kv), or more generally at an element of 
Z^{Xk^) (provided that one avoids the zeros and poles of /^). 
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define a pairing 

(1) ( , )y : m(AlbO,/,) X m(PicO./,_,,d) Q/z. 
We will first need a partially-defined Gfe-equivariant pairing 

(2) [ , ] : :^°(Ffc.ep) X Div°(Ffc.ep) fc-P*. 

Temporarily we work instead with a variety V over a separably closed field 
K. Let A = Alhy^f^ and A' = Picy/^j-^^j. Let ?p denote a Poincare divisor 
on ^ X A'. Choose a basepoint Pq G ViK) to define a map (/) : V ^ A. Let 
<Po = {(P, e Div(y X A'). Suppose y G 3^°(F) and D' G Div°(y). Choose 
z' G ZO(A') that sums to £{0') G Pic°(F) = A'{K). Then i:>' - ^qJoC-^') is the 
divisor of some function f'onV. Define 

[y,D'] := f'{y) + ^o{y,z') 

if the terms on the right make sense. 

We now show that this pairing is independent of choices made. If we 
change z', we can change it only by an element y' G y^{A'), and then [y,D'] 
changes by —'^^Q{y',y) + ^o{y,y') = 0, by Lang reciprocity. If we change 
^ by the divisor of a function F on A x A', then [y,D'] changes by 
F{(l){y) X z') - F{(f){y) x z') = 0. If G Div(A'), and if we change <P by tt^E 
(7r2 being the projection A x A' A'), then [y,D'] is again unchanged. By 
the seesaw principle [Mi3, Th. 5.1], the translate of *Po by (a, 0) G x A'){K) 
differs from by a divisor of the form (F) + 7r|-E; therefore the definition of 
[y, D'] is independent of the choice of Pq. It then follows that if F is a variety 
over any field k, then we obtain a Gjk-equivariant pairing (2). 

Remark. If F is a curve, then an element of ^°(VfeBep) is the divisor of a 
function, and the pairing (2) is simply evaluation of the function at the element 

of Div^CFfesep). 

We now return to the definition of (1). It will be built from the two exact 
sequences 

(3) ^ :yO(T4sep) ^ Z^iVksep) ^A{k^^P)^0, 

^^S?- DivO(y,.ep) A'(fc-P) , 
and the two partially-defined pairings 

(4) [ , ] : y^iVkse^) X DivO(yfcsep) k^'P* , 

the latter defined by lifting the second argument to a function on V^sep, and 
"evaluating" on the first argument. We may consider ^ ^^i^^ to be a subgroup 
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of Div'^(Vfcsop), and then the two pahings agree on 3^'^(Vfcscp) x ^ ^li^^ , so there 
will be no ambiguity if we let U denote the cup-product pairing on cochains 
associated to these. We have also the analogous sequences and pairings for 
each completion of k. 

Suppose a G m(^) and a' G m(^')- Choose a G ^^(^(fe^^P)) and a' G 
{A' (k^'^'p)) representing a and a', and lift these to a G C^(Z*^(Vfcsop)) and 
a' G C"'^(Div'^(Vfcscp)) so that for all a,T ^ G^, all G^-conjugates of have 
support disjoint from the support of a!^. Define 

7] := da [J a' -aU da' G C3(F^p*). 

We have dr] = 0, but H^{k''''P*) = 0, so rj = de for some e G C'^{k''''P*). 

Since a is locally trivial, we may for each place v G Mk choose (3y G A{kl^P) 
such that = dP^. Choose G ^'^(V'fcsep) mapping to (3^ and so that for all 
a G Gfc, all Gt,-conjugates of by have support disjoint from the support of a^. 
Then! 

■= {ay - dby) U o; - b„ U da; - G C'^{Gy, C*"*) 

is a 2-cocycle representing some 

Cy G H\Gy,kl'P*) = BT{ky) ^ Q/Z. 

Define 

{a,a')v = invt,(ci,). 

One checks using d{x Uy) = dxUy + (— l)'^°^^x U dy [AW, p. 106] that this is 
well-defined and independent of choices. In proving independence of the choice 
of f3y one uses the local triviality of a', which has not been used so far. 

This definition appears to be the most useful one for explicit calculations 
when A is a Jacobian of a curve of genus greater than 1. This is because the 
present definition involves only divisors on the curve, instead of m^-torsion 
or homogeneous spaces of the Jacobian, which are more difficult to deal with 
computationally. 

Remark. The reader may have recognized the setup of two exact sequences 
with two pairings as being the same as that required for the definition of the 
augmented cup-product (see [Mi4, p. 10]). Here we explain the connection. 
Suppose that we have exact sequences of Gfc-modules 



- 


Ml - 


^ M2 - 


Ms - 





- 




^ N2 - 


Ns - 





- 


Pi - 


^ P2 - 


Ps - 






^Since it is only the difference of the terms dv and dbv that is in ^''(Vfcsop), it would make no 
sense to replace (Oi, — dbv) U a[, by a„ U — dbv U aj,. 
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and a Gfc-equi variant bilinear pairing M2 'XN2 P2 that maps Mi x A'^i into Pi . 
The pairing induces a pairing M3 x A''i ^ P3. If a G ker [H^{Mi) W{M2)] 
and a' G ker [H^{Ni) H^{N2)], then a comes from some b £ ^^^{M^), 
which can be paired with a' to give an element of H^~^^~^{P3). If one changes 
b by an element c € ff*~^(M2), then the result is unchanged, since the change 
can be obtained by pairing c with the (zero) image of a' in H^{N2) under 
the cup-product pairing associated with M2 x P2- Thus we have a 

well-defined pairing 



(5) ker H\Mi) H\M2] 



X ker 



If we replace each Mi and Ni by complexes with terms in degrees and 1, 
replace each Pi by a complex with a single term, in degree 1, and replace 
cohomology by hypercohomology, then we obtain a pairing analogous to (5) 
defined using the augmented cup-product. One obtains the definition of the 
Cassels-Tate pairing above by noting that: 

1. If Afc is the adele ring of k, 

m(.4) =ker [H\Gk,Aik'''P)) ^ HHGk,A{k''^ 0^ A^)) 
by Shapiro's lemma; 

2. The analogous statement holds for III(A'); and 

3. If Pi = k'^^'P* and P2 = (F'^P^jfeAfc)*, then the cokernel P3 has H^{Gk,P3 
= Q/Z by class field theory. 



4. The homogeneous space associated to a polarization 

Let A be an abelian variety over a field k. To each element of 
i!f°(NS(^fcscp)) we can associate a homogeneous space of that measures 
the obstruction to it arising from a A;-rational divisor on A. From 

— > A'^ik'^'^P) — > Pic(Afcscp) — > NS(Afcscp) — > 

we obtain the long exact sequence 

(6) A'^ik) Pic(A) i7°(NS(^fescp)) 

H^A'^ik'^P)) H\Fic{Akscp)). 

(We have H° {PiciAk^cp)) = PicA because A{k) + 0.) For A G //°(NS(Afcscp)), 
define c\ to be the image of A in {^Al' {k^^^y) . By the proof of Theorem 2 



^The "diminished cup-product"?! 
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in Section 20 of [Mu3], we have 2A = 0£ where £ = {l,X)*V G PicA is the 
puhback of the Poincare bundle V on A x by {1, X) : A ^ A x . Hence 
2cA = 0.1 

Lemma 1. If k is a local field, then cx = for all X G ff°(NS(^fcsop)). 
Proof. Recall that "Tatei local duality" [Tal] gives a pairing 

that is perfect, at least after we divide by the connected component on the 
left in the archimedean case. It can be defined as follows: if P G H^{A(k^^'^)) 
= A{k) and z G (A"^ (k^'^^)) , then we use the long exact sequence associated 
to 

DivO(^fc.cp) ^V(^scp) _^ 

to map z to H ( ^scV* j , and "evaluate" the result on a degree zero fc-rational 
0-cycle on A representing P to obtain an element of H'^{k^^^*). 

Suppose A G i/0(NS(Afcsop)). By (6), ca is in the kernel of ^^(A^) ^ 
ff^(Pic(^fcsep)). The long exact sequences associated with 

' ' DivO(^fc.cp) > AV(fc-P) > 



> Div(^,tsop) > Pic(^jtscp) 



^sep* 

then show that c\ maps to zero in (^—^^^—j , so that every P G A{k) pairs 
with Ca to give in Q/Z. Hence, by Tate local duality, ca = 0. □ 

Corollary 2. If k is a global field and X G H^(NS{Akscp)), then 
CAGm(.4^)[2]. 

Proposition 3. If X is a principal homogeneous space of A representing 
c G H^{A), and if X = (pc for some C G PicX, then c\ is the image of c under 
the map i^^A) H^{A^) induced by X. 

Proof. Pick P G X{k^°^), and pick D G Div(X) representing C. Then 
D^P G Dw{Akscp) and A = 4>D_p, as we see by using tp to identify Pic'^(^fcscp) 



*One could also obtain this by using the fact that multiplication by —1 on A induces (—1)'^ = +1 
on NS(Afc=cp) and -1 on (A^^ {fc=<=P)). 

^The archimedean case is related to older results of Witt [Wi]. See p. 221 of [Sc]. 
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with Pic (X/jsep). By definition c\ is represented by ^ G Z^{A^) where 

:= the class of "(D^p) - D^p 

= the class of D^^p — D^p 

= the class of {D^p) _f^„p_p^ — D^p, 

which by definition represents the image of c under ^d_p = X. □ 

Corollary 4. // (J, A) is the canonically polarized Jacobian of a curve 
X, then the element c\ is represented by the principal homogeneous space 

Proof. The polarization comes from the theta divisor O, which is canoni- 
cally a /c-rational divisor on the homogeneous space Pic^].. □ 

Combining Corollary 4 with Lemma 1 shows that if X is a curve of genus 
g over a local field k^, then X has a A;„-rational divisor class of degree g — 1, a 
fact originally due to Lichtenbaum [Li] . 

Question. Are all polarizations on an abelian variety A of the form for 
some £ G PicX, for some principal homogeneous space X of A? 

The answer to the question is yes for the canonical polarization on a 
Jacobian (as mentioned above) or a Prym. (For Pryms, the result is contained 
in Section 6 of [Mu2] , which describes a divisor S on a principal homogeneous 
space P"*" such that H gives rise to the polarization.) One can deduce from 
Lemma 1 that if vr : (7 ^ C is an unramified double cover of curves of genus 
2g — 1 and g, respectively, with C, C, and tt all defined over a local field k of 
characteristic not 2, then there is a A;-rational divisor class V of degree 2g — 2 
on C such that tt^V is the canonical class on C. 

5. The obstruction to being alternating 

In this section, we show that if (^4, A) is a principally polarized abelian 
variety over a global field k, then c\ (or rather its class in UI{A^)nd) measures 
the obstruction to ( , )x being alternating. More precisely and more generally, 
we have the following "pairing theorem" : 

Theorem 5. Suppose that A is an abelian variety over a global field k 
and A G H^{m{Aksep)). Then for all a G in(^), 

(a, Xa + cx) = {a, Xa — cx) = 0. 
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Proof. We will use the homogeneous space definition of ( , ). Write 
A = 4>D for some D G Div(^fcsep). Let X be the homogeneous space of A 
corresponding to a. 

Now fix P G Xik'^'P). For any a E Gk, X = ""X = (j)^aD). Thus Xa is 
represented by ^ G where 

:= the class of i''D)_^^p_p^ - {"D) G Pic°(^fe-p)- 

Under t(<rp), corresponds to 

:= the class of (°'D)p - C'/?)(<.p) G Pic°(Xfesep). 

By definition, cx is represented by 7 G Z^[A^), where 

7^ := the class of {''D) -D G Pic°(^fe=«p)- 

Under tp, corresponds to 

7^ := the class of {''D)p -Dp G Pic°(Xfcsep). 

(Recall that the identification Pic" (^fcsep ) = Pic" {X^sep ) is independent of the 
trivialization chosen.) Thus Xa — c\ is represented by an element of Z^{A^) 
corresponding to a' G Z^(Pic°(XfcBep)), where 

a; := - 7; = the class of Dp - "{Dp) G Pic°(Xfcsep). 

But a' visibly lifts to an element of Z^(Div"(Xfcsep)) (that even becomes a 
coboundary when injected into ^^(Div(Xfesep))); so the element h' in the defi- 
nition of Section 3.1 is zero. Hence (a, Xa — c\) = 0. The other equality follows 
since 2c\ = 0. □ 



Remark. One can prove an analogue of Theorem 5 for the Cassels-Tate 
pairing defined by Flach [Fl] for the Shafarevich-Tate group III(M) defined by 
Bloch and Kato for a motive over Q together with a lattice Af in its singular 
cohomology, under the same assumptions that Flach needs for his antisym- 
metry result. In fact, the antisymmetry implies the existence of c, when the 
argument in Section 1 is used. (A more desirable solution, however, would be 
to find an intrinsic definition of c in this context.) 



6. Consequences of the pairing theorem 



In this section, we derive several formal consequences of Theorem 5. 

Corollary 6. // A is an abelian variety over a global field k and X G 
iJ"(NS(>ljtsep)), then ( , )x is antisymmetric. 
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Proof. The map 



(a, a) A = (a, Aa) = -{a,cx) 



is a homomorphism. 



□ 



Corollary 7. Suppose that A is an ahelian variety over a global field 
k and A G {H^{Aksep)) . Then ( , )\ is alternating if and only if c\ G 



For the rest of this section, we assume that A has a principal polarization 
A, which we fix once and for all. We write III = Ill(yl) and let c = A~^ca € III. 
We also drop the subscript A on the pairing ( , )a ^ HI x III — >■ Q/Z, so that 
Theorem 5 becomes (a, a + c) = (a, a — c) = 0. 

Define an endomorphism a*^ oi the group III by 



If (c, c) = 0, then a t— > a*^ is an automorphism of order 2. If (c, c) = i, then 
a I— »■ a'^ is a projection onto with kernel {0, c}. Define the modified pairing 
( , on III by {a^hy = {a,b'^). By Theorem 5, ( , is alternating. 

Theorem 8. Let c be the image of c in Ilind- The following are equiva- 
lent: 



2. The modified pairing { , y is alternating and nondegenerate on lllnd- 

3. #IIIn(j[2] is a perfect square. 

4. #LtInd[?^] is a perfect square for all n > 1. 

5. #IIInd(2) is a perfect square. 

6. #IIIiid(p) is a perfect square for all primes p. 

7. Either 

(a) c = and { , ) is alternating on Hind, or 

(b) For some n > 1, there exists a subgroup V = 2/2" x Z/2" of 
llind with basis a,b such that c = 2"~^a, (a, a) = 0, (a, 6) = 2"", 
{b,b) = \, and IUnd = V® F"*", with ( , ) alternating and nonde- 
generate on V^. 

If these equivalent conditions fail, then the following hold: 



in(AV)div. 




1. (c,c) = 0. 
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I. (c,c) = i. 

II. T^IUjidH is a perfect square for odd n, and twice a perfect square for 
even n. 

III. ^Ulndip) is 0, perfect square for odd primes p, and twice a perfect square 
for p = 2. 

IV. Hind = {0,c}©c^, and ( , ) and ( , are alternating and nondegenerate 
on C"*-. 



Proof. Since 2c = 0, either (c, c) = or (c, c) = 2- Suppose (c, c) = 0. We 
already know that ( , is alternating, and nondegeneracy follows from the 
nondegeneracy of ( , ) on Ulnd and the fact that o i— > o'^ is an automorphism. 
Thus 1 implies 2. Clearly 2 implies 3, 4, 5, 6. Also 7 implies 1, so for the 
equivalence it remains to show that 1 implies 7, and that (c, c) = \ would 
imply II, III, and IV instead. If c = we are done by Corollary 7. Otherwise 
pick the smallest n > 1 such that c ^ 2^Yil^^. Write c = 2"~^a for some 
a G nind. Since mnd[2'']-^ = 2'^mnd, there exists b G mnd[2''] such that 
(6, c) = i. Then (6, 6) = (6, c) = (c, 6) = i, and 2"-i(a, 5) = (c, 6) = i, and by 
multiplying a by a suitable element of (Z/2")*, we may assume (a, 6) = 2"". 
Let V be the subgroup of Ulnd generated by a and h. If n = 1, then a = c, so 
(a, a) = 0. If n > 1, then (a, a) = (a,c) = 2"~^(a, a) = 0, so that (a, a) = in 
any case. For p, g G Z, we have 

{pa + g6, a) = p(a, a) + g(6, a) = -q/2'^ , 
(pa + qh, b) = p{a, b) + q{b, b) = p/2" + g/2. 

If both are zero in Q/Z, then q G 2"Z, and p G 2"Z. Hence V = Z/2" x Z/2", 
and ( , ) is nondegenerate on so IHnd = V® V-^. This completes the proof 
that 1 implies 7. 

On the other hand, if (c, c) = ^, then the nondegeneracy of ( , ) on {0, c} 
implies Ulnd = {0, c} © c"*-, and that ( , ) is alternating and nondegenerate on 
c"*-. The rest follows easily. □ 

Corollary 9. Assume that III is finite. Then either 

1. (c, c) = 0, and there is a finite abelian group T such that III = T x T; in 
particular, #111 is a square; or 

2. {c,c) = ^, and there is a finite abelian group T such that III = Z/2Z 
X T X T; in particular, #111 is twice a square. 



1124 



BJORN POONEN AND MICHAEL STOLL 



// we assume only that Ulnd is finite, the same conclusions hold with Ulnd 
place o/III. 

Remark. One consequence of Theorem 8 is that if (c, c) = ^ then we have 
one pairing on Ilind that is nondegenerate, and another that is alternating, 
but we cannot find a pairing that is both! 

If {A, A) is a principally polarized abelian variety over a global field k, we 
say that A is even if the equivalent conditions 1 through 7 of Theorem 8 hold, 
and we say that A is odd otherwise. Theorem 8 shows that these notions do 
not depend on the principal polarization A (in cases where there are multiple 
choices for A). 



7. A formula for Albanese and Picard varieties 



Let F be a variety over k. In the long exact sequences associated to 

-^-^ ' Div(14.ep) ^ Pic(Vfc.ep) 

and 

_-> F^p* ^ k'^p(vy — ^ ^ 0, 

^ ' h.sep* ' 

the image of i70(Div(Vfe=cp)) = Div(F) in H^{P[c{Vkscp)) is Pic(F), and 
H^{k^^P{V)*) = 0, so that upon combining the sequences we obtain an ex- 
act sequence 

(7) — . Pic(y) — ^ i?°(Pic(Vfcsep)) ^ H^k'^'P*), 

and define (p as shown. (We could also have obtained (7) from the Leray spec- 
tral sequence.) Let (py : if''(G^, Pic(y^sep)) —>■ Q/Z denote the corresponding 
homomorphism for the ground field ky, composed with inv„ : H^{Gv, k^^^*) — > 
Q/Z. 

Proposition 10. Let V be a variety over a global field k. Let { , )v 
denote the pairing of Section 3.2. Suppose that n is an integer for which 
the homogeneous space Alby^^ of Alb^^^, is locally trivial. Suppose A € 
i?°(NS(Vfcsep)) is such that Picy^^ ^.^^ is locally trivial; choose CJ^ € Picyyj^. redC^'')- 
Then ^v{^'v) — f^'^ finitely many v, and 

(Alb^y/fe>Pi4A,red)v = -n E MK)- 

veMk 



Proof. It is well-known [CM] that (j)y is the zero map if V{ky) ^ 0, and 
the latter holds for all but finitely many v (see Remark 1.6 on p. 249 of [La2]). 
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Choose q G Z"{Vkaep) and D' G Div(Vfesep) mapping into Picy/^ red(^***^^) 
so that '^q and '^D' have disjoint supports for all a,T E Gj;. We use the notation 
of Section 3.2. We may take a and a' so that := ^q — q and := "^D' — D' . 
Then da = 0, da' = 0, and r/ = 0, so we may take £ = 0. Choose (3^ and b^,; 
then 7^ = (a^ — dhy) U a^. 

Choose L'^ G Div(T4sep) mapping to C'^, and let E'^ = D[, — L'^, so that 
E'^ e Div°(yfc5ep). Then < = dD'^ = dL'^ + dE'^. But (a^ - dby) U dE'^ = 
—d [{ay — dhy) U E'y], so 7^ is cohomologous to 

(a^ - dK) U dL; = (d(q^ - b^)) U JL; = (d(q^ - b^)) U 

where G has divisor dL'^ and we are abusing U yet again, this time 

using it to denote the cup-product pairing associated with the "evaluation 
pairing" 

(a , /) ^/(a). 

(When the first argument is in Z'^ [Vj^aep ) , this is compatible with the analogue 
of (4) over fcfP.) 

On the other hand, the image of under 

H\G,, Pic{V,s..)) (g,, '^^)^) 

is represented by modulo scalars, so 4>v{^v) is by definition the invari- 
ant of df^ considered as a 2-cocyclc taking values in fc^^P*. Since df^ takes 
values in fe^'^P* and dcg(— (q^, — by)) = — (n — 0) = -n, -{q^ - b^) U df^ G 
Z^(/c^''P*) represents —n4>y{C'^). But — (q^ — bv)Udfy differs from the 2-cocycle 
{d{qjj — bjj)) U above by the coboundary of (q,; — by) U so they become 
equal in H^{Gv, fc^^P*) = Q/Z. Summing over v yields the proposition. □ 

Remark. The element G Q/Z may depend on the choice of C^, 

but n(f)y{jC'^) does not. 



8. The criterion for oddness of Jacobians 



Theorem 11. Suppose that J is the canonically polarized Jacobian 
of a genus g curve X over a global field k. Let n he an integer for which 
P\c\jk e in(J). Then (Pic^/^, Pic^/^) = N/2 G Q/Z, where N is the number 
of places V of k for which Pic"'(Xfc^) = 0. 

Proof. Up to a sign which does not concern us, the pairing ( , ) on III(J) 
arising from the canonical polarization is the same as the Albanese-Picard 
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pairing for X, and Alb^^^ = Pic^/^i-ed ~ ^^'^x/k- be a /ct,-rational 

divisor class on X of degree n. By Proposition 10, it suffices to show that 
n(j)y{Cv) equals ^ or in Q/Z, according to whether Pic"(Xfc^) = or not. 

The index (resp. the period P^) of X over is the greatest common 
divisor of the degrees of all /c^-rational divisors (resp. /c^-rational divisor classes) 
on X. By [Li],t3 equals P„ or 2P„, and 

(8) 0,(/7O(G,,Pic(Xfc.cp))) = /-iZ/Z, 

04i7O(G,,PicO(X,.ep))) = P-'Z/Z. 

Since Pic^^^ is locally trivial, we have n = r^P^ for some G Z. 

If Pic"(XfcJ 7^ we may take € Pic"(XfcJ. By (7) over k^, (j){£.^) = 0, 
so n • (j)y{Cy) = 0, as desired. 

If Pic"(Xfe^) = then we must have = 2Py and r„ odd. Let T)^ denote 
a /c^,-rational divisor class of degree Py. We may assume = r^V.^. By (8), 
(j)v{'Dy) must generate /~^Z/P~^Z, so that Pv4)y{'Dy) generates PyI~^Z/Z = 
iZ/Z. Hence Py4>.,{Vy) = ^ G Q/Z. Then 

nM^v) = rlPy<Py{Vy) = rl/2 = i G Q/Z. □ 

If X is a curve of genus g over a local field ky, we will say X is deficient if 
Pic^~^(Xfc^) = 0, i.e., if X has no /ci,-rational divisor of degree g — 1- (Recall 
from Section 4 that there is always a /c^-rational divisor cZass of degree g — 1.) 
If X is a curve of genus g over a global field /c, then a place v oik will be called 
deficient if is deficient. 

Corollary 12. // J is the canonically polarized Jacobian of a genus g 
curve X over a global field k, then the element c € III(J)[2] of Section 6 is 
Pic^^, and {c,c) = N/2 € Q/Z, where N is the number of deficient places 
ofX. 

Proof. Combine Corollary 4 with Theorem 11. □ 

Remarks. For g = 1, Corollaries 7 and 12 let us recover Cassels' theo- 
rem [Ca] that ( , ) is alternating for elliptic curves. 

Theorem 11 and Corollary 12 hold even if X has genus 0! In this case 
J is a point, and so c = 0. The condition Pic~^(Xfc^) = is equivalent to 
X{ky) = 0. So we recover the well-known fact that X{kv) = for an even 
number of places f of A;. 

Question. Is there an analogue of Corollary 12 for general principally 
polarized abelian varieties, or at least an analogue for Pryms? 



Actually, the proofs in [Li] are for finite extensions of Qp only, but the same proofs work for 
local fields in general, when one uses the duality theorems from [Mi4]. 
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9. The density of odd hyperelliptic Jacobians over Q 

Fix g > 2. In this section we are interested in the "probabihty" that a 
Jacobian of a random hyperehiptic curve of genus over Q has (c, c) = ^ 
(and hence nonsquare order of III if III is finite) .E^ More precisely, we will 
consider the nonsingular projective models X of curves defined by equations 
of the formal 

(9) y2 ^ a23+2x23+2 + asg+ix^s+i + . . . + aix + ao 

with € Z. 

Let Sg be the set of a = (ao, oi, . . . , 02^+2) in Z^^"^^ such that (9) defines 
a hyperelliptic curve of genus g whose Jacobian over Q is odd. Our goal in 
this section is to prove that the density pg := p{Sg) exists, and to derive an 
expression for it in terms of certain local densities. 

The set of a G Z^^+'^ (resp. in Zp^+'^ or in R^^+'^) for which (9) does not 
define a hyperelliptic curve of genus g is a set of density (resp. measure) zero, 
because it is the zero locus of the discriminant A € Z[ao, ai, • • • , 029+2]- We 
may hence disregard this set when computing densities or measures. 

9.1. The archimedean density. Let Ug^oo be the set of a € R^^^^ such that 
the curve over R defined by (9) has genus g and is deficient. The boundary 
of Ug^oo is contained in the zero locus of A, and hence has measure zero. Let 
Uloo = Ug,oo n [-1, and let Sg^^o = 2-(2f+3)/,^(f/i^). 

If g is odd, then clearly s^^oo = 0. If 5 is even, then a G f7g,oo if and only 
if the polynomial X]^£o^ OjX* is negative on R and has no double root. Hence 
for even g^ ^g^oo — Q2g-\-2/2^ where Q^i denotes the probability that a degree ti 
polynomial with random coefficients drawn independently and uniformly from 
[—1, 1] has no real root. 

Proposition 13. For all g >2, Sg^^o < 1/4. 

Proof. The set C^^^oo is contained in the subset of [—1, l]29+3 for which the 
first and last coordinates are negative. □ 

Proposition 14. As g ^ 00, Sg^oo = 0(1/ log 5). 

Proof. An old result of Littlewood and Offord [LOl], [L02] implies that 
Qn = 0(1/ log n) as n ^ 00. See also [BS, p. 51]. □ 



^^We could derive similar results for other number fields, or for other families of curves, but the 
results would be more awkward to state, so we will restrict attention to hyperelliptic curves over Q. 

^■^If g is even, then every hyperelliptic curve has a model of this form. If g is odd, then we are 
missing the hyperelliptic curves for which the quotient by the hyperelliptic involution is a twisted 
form of . 
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Based on some heuristic arguments and Monte Carlo runs, we conjecture 
that in fact there exists a > such that g„ = n~""'"°(^) as n — > oo, and a 
is unchanged if the uniform distribution on [—1,1] is replaced by any random 
variable X satisfying 

1. X has mean zero, 

2. Prob(X / 0) > 0, and 

3. X belongs to the domain of attraction of the normal law. 

Currently there seems to be no such X for which an upper or lower bound 
of order for some /3 > is known. On the other hand, there is a huge 
literature on the expected number of real zeros of a random polynomial; see [BS] 
and [EK] for references. This seems to be an easier question, because of the 
linearity of expected value (one can sum the expected number of zeros in tiny 
intervals [t,t + dt]). 

9.2. The nonarchimedean densities. For finite primes p, let Ug^p be the 
set of a € Zp^+'^ such that the curve over Qp defined by (9) has genus g and is 
deficient. The boundary of Ug^p is contained in the zero locus of A, and hence 
has measure zero. In this section we derive bounds on Sg^p := fip{Ug,p). 

Remarks. Suppose that the curve (9) has genus g. Let vr : X ^ be 
the projection onto the x-line. Then ■k*0{\) G Pic^(X). Hence if g is odd, 
Pic^~^(X) 7^ 0, so that pg = and Sg^p = for all p.El For even g, we can only 
say that the condition Pic^~^(XQ^) 7^ is equivalent to Pic^(XQ^) 7^ (or to 
Pic'"(XQ^) 7^ for any other odd integer m, for that matter). 

The papers [vGYl] and [vGY2] give criteria in special cases for when a 
hyperelliptic curve of genus g over a p-adic field admits a line bundle of odd 
degree. The first half of the following lemma corresponds to Proposition 3.1 
in [vGYl]. 

Lemma 15. Let X be the curve = f{x) with f{x) G Z[x] square 
free {except possibly for integer squares). Let f be the reduction of f modulo 
an odd prime p. Suppose that f is not of the form uh? where it G F* \ F*^ 
and h G Yp[x\ (h = is allowed). Then Pic^XqJ ^ 0. // moreover p is 
sufficiently large compared to degf {or the genus of X), then X(Qp) 7^ 0. 



^ Even if we considered hyperelliptic curves for which the quotient by the hyperelliptic involution 
was a twist of P^, it would still be true for g = 1 (mod 4) that a hyperelliptic curve of genus g 
automatically admitted a line bundle of degree g — 1. 
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Proof. Suppose first that / is not a constant multiple of a square in Fp[x] 
(and so in particular / 7^ 0) . Write / = £j'^ with £, j G Fp [x] and £ (nonconstant 
and) square free. Let X denote the affine curve = £{x) over Fp. By the 
Weil conjectures, ^X(Fpm) ^ 00 as m ^ 00, so for any sufficiently large odd 
m, X has a point with x-coordinate a G F^m such that a is not a zero of /. 
Lift a to an element a of the degree m unramified extension L of Qp. Then 
X{L) contains a point P with x-coordinate a. Finally the trace Ttj^/q^P is 
a Qp-rational divisor of odd degree m. By the remarks preceding the lemma, 

PicHXQ^)/0. 

On the other hand, if / = /i^ for a nonzero h G Fp[x], then for sufficiently 
large odd m, there exists a G Fpm such that h{a) ^ 0. Lift a to an element 
a of the degree m unramified extension L of Qp. Then X{L) contains a point 
with x-coordinate a, and we conclude as before that Pic^(XQ ) 7^ 0. 

If p is sufficiently large compared to deg/, then in each case m = 1 is 
sufficient, and so X(Qp) 7^ 0. □ 

We have a partial converse to Lemma 15. 

Lemma 16. Let X be a hyperelliptic curve = f{x) with f{x) G Z[a:] 
square free {except possibly for integer squares) and of degree 2g + 2. Let p 
be an odd prime. Write f{x,z) for the homogenization of f{x). If f{x,z) = 
uh{x,z)'^ +pj{x,z) where the reduction of u E Zp is in F* \ F*^, and h{x,z) 
and j{x,z) are homogeneous of degrees g + 1 and 2g + 2, respectively, and if 
h{x,z) andj{x,z) {the reductions of h and j mod have no common factor 
of odd degree, then Pic^(XQp) = 0. 

Proof. It suffices to show that if a, 6 are in the ring of integers O of an odd 
degree extension L of Qp, and not both in the maximal ideal m of L, then f{a, b) 
is not a square in L. Let v denote the (additive) normalized valuation of L. If 
v{uh{a,b)'^) < v{p j{a,b)), then clearly /(a, 6) cannot be a square in L. On the 
other hand, if v{u h{a, b)^) > v{pj{a, b)), then h{a, b) must be in m, and j{a, b) 
cannot be in m, since otherwise (a : 6) G P^(A;) would be a common zero of h 
and j, where k, the residue field of L, is of odd degree over Fp. This would 
contradict the assumption on h and j. Therefore v{p j{a,b)) = v{p) is odd 
(since L has odd degree over Qp), which implies v{uh{a,b)'^) > v{p j{a,b)). 
But then the valuation of f{a,b) is that of pj{a,b) and hence odd, so that 
f{a, b) again cannot be a square. □ 

Remarks. 1. The previous two lemmas are also related to some recent 
work by Colliot-Thelene and Saito [CTS], and by Bosch and Liu [BL]. Let ky 
be a local field with ring of integers Oy and (finite) residue field k. The index 
I2 of a (geometrically integral, smooth, proper) curve X over ky is the gcd of 
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the degrees of the closed points of X. Equivalently, deg(Div(X)) = /2Z. Let 
X SpecO^ denote the minimal proper regular model of X. Let Yi, . . . , 1^ 
denote the components of the special fiber of X, and let di, . . . ,dr be their 
multiplicities. Let Cj = \K D K{Yi) : k]. Let I3 = gcd{(ijej}. Thcoremc 3.1 
of [CTS] implies that 121-^3) and Corollary 1.3 of [BL] implies that /3|/2- Hence 
12 = 13. This means that X is deficient if and only if I3 does not divide g — 1, 
where g is the genus of X. (This is true for arbitrary curves, not only for 
hyperelliptic ones, where the index is either 1 or 2.) 

2. A discussion with J. van Geel yielded the following alternative criterion 
for deficiency. Let A; be R or a finite extension of Qp. Let H be the nontrivial 
quaternion algebra with center k, and let H[a;] be the polynomial ring in which 
X commutes with scalars (but scalars do not usually commute with each other) . 
Let X be the curve y"^ = f(x) over k with / square free. Then Pic^(X) = 
if and only if f{x) is the square of a purely imaginary polynomial in H[x]. 
("Purely imaginary" means that the coefficients c satisfy t(c) = — c where l is 
the involution of H.) This criterion does not seem to help computationally, 
however. 



Proposition 17. If g >2 is even and p is an odd prime, then 
^~p){-^~^) 2^ - ""^'^ -i}^ ^) 2^ ■ 



Proof. An easy counting argument shows that exactly ^(p^^^ — 1) + 1 of 
the p2a+3 polynomials / € Fp[x] of degree at most 2g + 2 are of the form uh? 
with u E F*\ F*^ and h G Fp[a;]. Together with Lemma 15, this proves the 
upper bound. 

Similarly, the probability that the homogenization f{x,z) is of the form 
uh^ with u E F*\ F*^ and h{x,z) G Fp[x,z] homogeneous and nonzero is 
(p-(9+i) -p-{29+3))/2. In this situation, lift u to u e {1,2, . . . ,p - 1}, lift h to 
h with coefficients in {0, 1, ... ,p — 1}, and write / = uh"^ +pj, with j G Z[x, z] 
homogeneous of degree 2g + 2. Assume that u was chosen at random uni- 
formly from the nonquadratic residues, and that the sign of h was also chosen 
at random with equal probabilities; the choices do not affect whether h and j 
have a common factor. Then the distribution of j is uniform and independent 
oi h. In the following paragraph we show that the probability for two ran- 
dom homogeneous polynomials in two variables to have no common factor is 
{l—p~^)[l—p~^). Since h is already known to be nonzero, the probability that 
h and j have no common factor is (1 — p^^)(l — p^^)/(l — Together 
with Lemma 16, this proves the lower bound. 
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Let us now prove that the probabihty for two (chosen uniformly at ran- 
dom) homogeneous polynomials in Fp[x,2;] of degrees m,n > to have no 
common factor is (1 — p~^){l — Let a^i = — 1 be the number of 

nonzero homogeneous polynomials of degree n, and let bm,n denote the num- 
ber of ordered pairs of nonzero homogeneous polynomials of degrees m and n 
without common factor (if n is negative, we set a„ = 0, and similarly for bm,n)- 
Then we have the relations 

ttn - {p + 1) an-l + P an-2 = (p - I) 6n , 

^ ^ bm—j,n—j O'j ~ ip 1) (^m (^n ■ 
3 

In the first equation, (5„ = 1 if n = and (5„ = otherwise. In the second 

equation, the j^^ term on the left counts the pairs with a gcd of degree j; each 
pair is counted {p — 1) times, since the gcd is determined only mod F*. Now, 
if m, n > 0, 

(p- l)(p^ - l)p'"+'*"^ = aman- {p + l)am-ian-i+pam-2an-2 

= Yl ^m-j,n-j {aj - (p + 1) Oj-l + P aj-2)/{p - 1) 

i 

Since the polynomials have to be nonzero in order to have no common factor, 
the probability we want is bm,n/p^~^^~^'^ = (1 ~ P~^)(l — ^ 

Remarks. Proposition 17 implies that for fixed even g > 2, Sg,p ~ 
as p — > oo. 

A more careful analysis shows that for odd p, 

(l - p-' + |p-2 - 2p-3 + + p-5 _ 1^-6^ 

< S2,p < ip-^ (l - p-^ + p-^ + 3p-^ - p-^) . 

For practical purposes (dealing with a given curve) , the following criterion 
might be useful. 

Lemma 18. Let X be the curve = f{x) with f{x) G Z[x] square free 
{except possibly for integer squares) of degree 2g + 2 with g even, and let p be 
an odd prime. Then p can be deficient for X only if the discriminant of f is 
divisible by p^'^^. 

Proof. This follows from Lemma 15 in the following way. Let F(x, z) = 
^2s+2 j^xjz) be the homogenization of /, and let F denote the reduction of F 
mod p. \i F = 0, then disc(/) is divisible by p^^"^^, hence a fortiori by pP^^ . 
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Now assume that F / 0. Let 

be its factorization with hj of degree dj and u G F*. To this corresponds a 
factorization over Zp 

with Hj of degree Cj dj and reducing to h^j^ . The valuation of the discriminant 
of Hj must be at least 

^^^d,(^'^^=dj{ej-l), 

and hence we get 

Vp{disc{f)) = ^Vp{disc{Hj)) >^dj {ej - 1) = deg(/) -^dj. 

j j j 

If F is (a constant times) a square, then the sum of the dj is at most ^ deg(i^), 
whence p^~^^ \ disc(F) = disc(/). □ 

Proposition 19. For all g > 2, Sg^2 < 875/1944 ^ 0.4501 and 
Sg,2 < exp{-Omg/logg). 



Proof. Suppose Pi, P2, . . . , Pr are distinct closed points of Pp^ such that 
the residue degree of Pi is odd, and such that di < 2g + 3. Let rjj 

denote the normalized Haar measure of the nonsquarcs in the ring of integers 
of the unramificd extension of Q2 of degree j. We claim that Sg_2 < 111=1 "Hdi- 
For each i, let Oi be the ring of integers in the de grce unramified 
extension of Q2, and choose a point Qi G A^(Oj) with relatively prime coordi- 
nates such that the projection of Qi onto P^(Oj) reduces to a point in P^(F2) 
above Pi. For a G Z2^+^ let f{x,z) denote Y:f=o^ ^jX^ z'^3+2-j _ The set Ug^2 

is contained in the set ?7' of a G Zg^^^ for which f{Qi) is a nonsquarc in Oi 
for all i. Applying Lagrange interpolation to the Qi and their Q2-conjugates 
shows that the Z2-module homomorphism 

z2^+3 ^ no, 

i=l 

a ^ {f{Ql)J{Q2),...J{Qr)) 

is surjective. (Remember that 2^ + 3 > J2i=i di-) Hence 

/■ 

Sg,2 = /^2(C/g,2) < f^2{U') = Y[r]di, 

i=l 

as claimed. 
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A short calculation shows that 

3 • 2-'-2 + 1 
rji = : < 5/6 

for all j > 1. By taking Pi, P3 to be the points in P^(F2), and P4 to be a 
point of degree 3, we obtain 5^,2 < Vim = (5/6)^(7/9) = 875/1944. 

If instead we let m be the largest odd integer with 2"^ < 2g + 2, and 
take Pi, • • • ) -fr to be all closed points on Pp of degree dividing m, then 
ELi c^i = #P'(F2™) = 2™ + 1 < 25 + 3, and 

^ ^ 2- ^ (2g + 2)/4 ^ g 



m - log2[(2ff + 2)/4] - 21og2 5' 
so that 

Sg,2 < (5/6)'" < exp(ac//log5r) 
where a = \ log(5/6) log 2 « -0.0631878. □ 

Remarks. 1. It is a fact that Sg^p € Q for all even g > 2 and finite p. 
Indeed, Theorem 7.4 in [De]t3 implies that any subset of Z^^"*"^ that is definable 
(in the sense of (6.1) of [De]) has rational Haar measure. To see that Ug^p is 
definable, observe that the Riemann-Roch theorem implies that the existence 
of a Qp-rational divisor of degree 1 is equivalent to the existence of a point 
defined over some extension of Qp of odd degree < g + I, and the latter is 
clearly a definable property. 

We expect that for fixed even g >2, there even exists A^^ > 1 such that for 
any residue class modulo Ng, the values of Sg^p for sufficiently large primes in 
that class are given by a rational function of p. Some general uniformity results 
in p for definable sets can be found in [Mac2] (Thm. 22 and its corollaries), 
but obtaining rational functions of p will require use of properties of the sets 
Ug^p beyond their definability. 

2. In [St], we will describe a practical algorithm deciding whether a place 
is deficient for a given hyperelliptic curve (of even genus) over a number field. 
This algorithm then makes it possible to find out whether the curve in question 
has even or odd Jacobian, which (in the odd case) will improve the bound on 
the rank given by the 2-descent procedure (see [PS]) and (under the standard 
finiteness conjecture regarding III) will pin down its parity. For curves of 
genus 2 over Q, the 2-descent, together with the deficiency-checking algorithm, 
has been implemented as a computer program by the second author. For 
details, see again [St]. 



^ It would be more accurate to say "Theorem 7.4 and its proof," because the theorem states 
that a certain function Zs{s) is a rational function of p~", whereas we need to know also that the 
coefficients of the rational function are themselves in Q. Denef's proof uses the quantifier elimination 
of [Macl]. 
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9.3. The passage from local to global. We formalize the method for obtain- 
ing density results in the following lemma, because the method undoubtedly 
has other applications. (See the remark after Lemma 21 and the remarks after 
Theorem 23, for instance.) 

Lemma 20. Suppose that Uoo is a subset ofR!^ such that R"*" • Uoo = Upa 
and Hoo{dUoo) = 0. Let = Uoo D [-1,1]^ and let Soo = 2-'^fioo{U^)^ 
Suppose that for each finite prime p, Up is a subset ofZp such that ^p{dUp) = 0. 
Let Sp = fj,p{Up). Finally, suppose that 
(10) 

^im J) € Z*^ : a G C/p for some finite prime p greater than = 0. 

Define a map P : Z'^ ^ 2^^Q as follows: if a ^ Z^, let P{a) be the set of places 
p such that a Up. Then 

1. J2pSp converges. 

2. For & C 2*^'3, := p(P^^(6)) exists, and v defines a measure on 
2Mq. 

3. The measure v is concentrated at the finite subsets of Mq: for each finite 
subset S of Mq, 

(11) H{s}) = Y[^p n(i-^p)' 

pes p<^s 

and if & C 2^^<3 consists of infinite subsets of Mq, then = 0. 

Proof. First we handle the case in which there exists M such that Up = % 
for all finite p > M. For convenience we say that a subset of Zp is an open 
interval if it has the form {xGZp: \x — a\p <b} for some a € Zp and 6 G R, 
and a subset of [—1,1] is an open interval if it has the form U R [—1,1] for 
some open interval U in R. By an open box in [-1,1]^^ x np<Af mean a 

Cartesian product of open intervals. 

Let Sjv = {a G Z'^ : \a\ < N}. Embed Bn in [-1, 1]"' by dividing by N. 
We claim that the fraction of that maps in [—1, 1]^ x np<Af ^p ^^^^ open 
box I = loo X Ilp<M approaches 2~'^fi{L) as — > cx3, where // denotes the 
product measure of the //p. The subset of Bj\f satisfying the p-adic conditions 
is the subset contained in a finite disjoint union of translates of a sublattice 
determined by congruence conditions; the number of translates as a fraction of 



-"^^Since is the union of the open set {U}^)'^ (its interior) and a subset of a measure zero set, 
is automatically measurable. 
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the index of the sublattice equals np<M l^pi^p)- I^or each of these translates, 
the fraction of elements satisfying the box condition at oo equals 



which tends to 2~'^//oo(-^oo) as iV ^ cx), proving our claim. 

Let Vp be the complement of Up in (or of U^^ in [—1, l]'' if p = cxd). If 
for each p < M and p = oo we choose cither Up {U^ if p = oo) or Vp, and let 
P be the product, then by compactness wc can cover P (the closure of P) by a 
finite number of open boxes the sum of whose measures is arbitrarily close to 
the measure of P, which equals the product of the measures of the Up or Vp, 
since each has boundary of measure zero. By the previous paragraph it follows 
that for any e > 0, the fraction of Bjsf that maps into P can be bounded above 
by 2~'^/x(P) + s for sufficiently large N. On the other hand, the fraction of Bn 
that maps outside P can also be bounded above, since the complement of P is 
a finite disjoint union of other such P's, and the bound obtained is of the form 

1 - 2-'^ii{P) + (2^ - l)e 

for sufficiently large N , where L equals one plus the number of primes up to 
M. Thus the fraction of Bj^ that maps into P tends to 2^'^fi{P) as N oo. 
This completes the proof in the case where Up = $ for p > M. 

We return to the general case: if M < M' then the density of the set of 
a G Z*^ for which a ^Up for all primes p with M < p < M' is Y\m<p<M'{^~ ^p)-> 
and the condition (10) implies that this tends to 1 as M ^ oo, uniformly with 
respect to M' . In other words, HpCl ^ ^p) converges. Thus Sp converges. 
This implies the convergence of the infinite product in (11). 

Fix 6 C 2^Q. The condition (10) implies that the actual upper and lower 
densities of P~^{&) arc approximately what wc would have obtained for the 
density if Up had been replaced by the empty set for finite p > M, and that 
the error in this approximation tends to zero as M ^ oo. The other results 
are now clear. □ 

To verify that Lemma 20 applies in our situation, we must check (10). 
This we will do in Lemma 22 below, with the aid of a result of Ekedahl. 

Lemma 21. Suppose f and g are relatively prime polynomials in 
Z[xi,X2, ■ ■ ■ ,Xd]- Let >S'm(/, g) be the set o/ a € Z'^ for which there exists a fi- 
nite prime p > M dividing both f{a) and g{a). Then limM^oo piSMif, g)) = 0. 

Proof. Apply Theorem 1.2 of [Ek] to the subscheme of defined by the 
equations f = g = 0. □ 
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Remark. Once one has Lemma 21, it is easy to apply Lemma 20 to obtain 
a formula for the density of a G Z*^ such that /(a) and g{a) are relatively prime, 
in terms of the number of solutions to /(a) = g{a) = in for each p. The 
same can of course be done for {a G Z'^ : gcd(/i(a), . . . , fn{a)) = 1}, provided 
that the polynomials fi E Z[xi, . . . ,Xd] define a subvariety of codimension at 
least 2 in A^. Results such as these follow also from [Ek]. 

Lemma 22. Fix g > 1. Let Rm {resp. R'j^j) be the set of a = 
(oo, ai,..., 029+2) £ Z^^"*''^ for which (9) is a curve X of genus g that fails 
to admit a Qp-rational point (resp. a Clp-rational divisor of degree 1 — for 
even g, this is equivalent to being deficient) at some finite prime p greater 
than M. Then limM^oo p(^A/) = ^^^m^ooP{R'm) = 0- 

Proof. The space Pol„ of binary homogeneous polynomials ^27=0 Oi^^-z"""* 
over C may be identified with A"'''^. If 51 > 1, then the Zariski closureEj V of 
the image of the squaring map Polg+i — > Pol2g+2 is of codimension at least 2 
in Pol2g+2 = A'^^"'"^, so that we can find two relatively prime polynomials 
f,g G Z[ao, . . . ,«2g+2] that vanish on V. For all but finitely many primes p, 
it is true that if a G Z^^"'"'^ and X)i£o^ ^i^* modp is a square in Fp[x] then 
p divides /(a) and g{a). Combining this with Lemma 15 shows that R^j C 
ff) for sufficiently large M. By Lemma 21, limM^oo p('S'm(/, ff)) = 0, so 
limM^oo p(-RAf) = also. Since R'j^.^ C R^^, limAf^oo p(-Rm) = as well. □ 

9.4. The global density. 

Theorem 23. For each g > I, the density pg = p{Sg) exists, and 

(12) l-2p,= n (l-2sg,p)- 

peAfQ 

If g is odd, then Pg = and Sg,p = for all p. If g is even, then < pg < 1, 
and < Sg^p < 1 for all p. 

Proof Let 6odd ^ 2^^'3 (resp. 6 

even) be the set of all finite subsets of 
Mq of odd (resp. even) order. Lemma 22 gives us the condition (10) needed 
for the application of Lemma 20. Thus J^(©odd) exists. By Corollary 12, 
Pg = J^(6odd)- Also by Lemma 20, i^(6even) = ^ ~ Pg-, aiid the quantity 
1 — 2pg = z^(Seven) " i^(©odd) Can be obtained by substituting Xp = —1 for all 
places p in the generating function Y{p{l — + Sg^pXp). The final vanishing 
results were noted already in Section 9.2. Finally suppose g is even. It is 
enough, by openness, to exhibit for each p two nonsingular curves over Qp 



-'^''In fact, it is easy to show that the image of the squaring map is already Zariski closed, but we 
do not need this. 
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in the correct form, one deficient and one not. The curve = x^^"*"^ + 1 is 
nondeficient at all p, so it remains to construct deficient curves. For p = oo 
we may take = —{x^^'^'^ + !)• For odd finite p, Lemma 16 gives deficient 
curves. For p = 2, a similar argument shows that = 2x^^^'^ + 3 is deficient. 

□ 

Remarks. 1. One could also think of (12) as arising from a Fourier trans- 
form of an infinite convolution on the group Z/2Z. 

2. We can also deduce from Lemmas 20 and 22 that for any even g > 2, 
and any finite subset S C Mq, there exist infinitely many hyper elliptic curves 
X over Q of genus g for which the set of deficient places is exactly S. The same 
can be proved for any number field k, provided that S contains no complex 
places. 

Similarly, Lemmas 20 and 22 (generalized to higher number fields) can be 
used to show that for any g > 1, any number field k, and any finite subset S C 
Mk containing no complex places, there exist infinitely many (hyperelliptic0) 
curves X over k of genus g for which {v £ \ X{kv) = } = 5. 

Another corollary is that for every g > 2 and every number field k, there 
exists an odd principally polarized abelian variety A over k of dimension g. To 
construct A, start with a genus 2 curve over k whose Jacobian J is odd, and 
let ^ = J X E3~'^ for an elliptic curve E over k, with the product polarization. 

3. It appears that p2 ~ 0.13. This value was obtained in the following 
way. A numerical Monte Carlo integration (with 10^^ tries) gives the value 
■52,00 ~ 0.0983. In the same way (again with 10^^ tries, using a computer pro- 
gram that checks for points of odd degree over Q2) we obtain the estimate 
S2,2 ~ 0.02377. (Note that this is much smaller than the bound in Proposi- 
tion 19.) The estimate for p2 then follows from Theorem 23 and the bounds 
in the remarks after Proposition 17. 

Theorem 24. As g ^ 00, pg = 0(1/ log 5) . 

Proof. This follows from Propositions 14, 17, and 19, and Theorem 23. 

□ 

Our conjecture that qn = n~"+°(^) as re — > 00, would imply pg = g~"'+°W 
for even g tending to infinity. 

10. Examples of Shafarevich-Tate groups of Jacobians 

In this section we apply Theorem 11 to deduce facts about Shafarevich- 
Tate groups of Jacobians. 



For g = 1, the curves will be of the form = f{x) with deg/ = 4. 
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10.1. Jacobians of Shimura curves. 

Theorem 25. Let k be a number field, and let B be an indefinite quater- 
nion algebra over Q of discriminant Disc5 > 1. Let X be the corresponding 
Shimura curve, considered over k, and let J be its Jacobian. If d G Z and 
Pic^yj^. G III(fc, J), then (Pic^^^, Pic^yj^.) = 0. In particular, J over k is even. 

Proof. Let g be the genus of X. If g is odd, then part (b) of Theorem 2 
of [JLl] imphes that for any completion ky, Pic'^(Xfc^) = if and only if 
^^^x/ki^v) = 0- Thus if g is odd and Pic^/^ G III(A;, J), then the integer N of 
Theorem 11 is zero; so (Pic^^j,, Pic^^j^) = 0. 

From now on we assume g is even. Temporarily let us STipposc A: = Q 
and d = 1. By Corollary 4 of [JLl], Pic^/^ G III(Q,^)- bmce g is even, 
DiscS = 2i where £ is a prime congruent to 3 or 5 modulo 8, as mentioned in the 
introduction of [JLl]. If ^ = 3 (mod 8), then [JLl] shows that Pic^(XQj = 
exactly for p = i and p = oo. If £ = 5 (mod 8), then [JLl] shows that 
Pic^(XQp) = exactly for p = 2 and p = oo. In either case, (Pic^y^, Pic^^^) 
= by Theorem 11. Replacing Q by and Pic^ by Pic*^ simply multiplies the 
result of the pairing by [k : Q], so that the result is always zero. □ 

Remarks. 1. The results of [JLl] let one determine exactly when Pic^^^ G 
III(A;, J). We do not know, however, if Pic^y^, is trivial in every case in which 
it is everywhere locally trivial. Theorem 25 gives some evidence that this may 
be true. 

2. Using our Corollary 12, Jordan and Livne [JL2] have recently shown 
that there are infinitely many Atkin-Lehner quotients of Shimura curves whose 
Jacobians over Q are odd. 

3. The analogous questions for the standard modular curves are much 
easier. For A?^ > 3 let X{N)^"^^ be the nonsingular projective model over Q of 
the affine curve Y{NY^'^^^ that represents the functor "isomorphism classes of 
r(A)^'''*'^ elliptic curves" as on p. 482 of [Ka]. If A is a curve over a number 
field k that admits a map X(A)'^"*^ —^ X over k for some N > 3, then X(k) 
is nonempty, because there is the image of the cusp oo on X{N)'^'^^^^, which 
is rational. Hence if J is the Jacobian of X, the element Pic^^p. G III(A;, J) is 
trivial for every n G Z, and in particular J is even. 

10.2. Explicit examples. 

Proposition 26. Let g >2 and t be integers with g even. Let X be the 
genus g hyperelliptic curve 

over Q and let J be its Jacobian. Then J is odd if and only ift>0. 
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Proof. By Corollary 12, we need only count the deficient places of X. 
Since g is even, and since X has a degree 2 map to over Q, the number of 
such places is the same as the number of places p for which Pic^(XQ^) = 0. 
We will show that Pic^(XQp) 7^ for all finite p, and that the existence of a 
degree 1 line bundle for p = 00 depends on the sign of t. 

If t is even, x^^"*"^ + x + t has a zero in Z2, and if t is odd, then X has a 
Q2-rational point with x-coordinate —1 — t, in each case by Hensel's lemma. 
Hence X{Q2) 7^ 0, so that Pic"'^(XQ2) 7^ 0. If for an odd prime p we have 

+ x + t) = {ag+ix3+^ + agx^ + ... + aof (mod p) 

with Og+i, a^, . . . , oq G Fp, then by equating high order coefficients we find 
Cp+i 7^ 0, and then Oj = for i = g, g — 1, g — 2, . . . ,1,0, contradicting the 
linear coefficient. Hence by Lemma 15, Pic^(XQp) 7^ 0. 

If t > 0, then t > 1 and we see that x^5+2 + x + t > for all x G R, by 
considering x<— 1, — l<x<0, and x > separately. Hence ii t > 0, X has 
no real divisor of odd degree. On the other hand, if t < 0, then X(R) has a 
point with x = 0. □ 

Proposition 27. Let J be the Jacobian of the genus 2 curve 
X : = -3(x2 + l)(x2 - 6x + l){x'^ + 6x + 1) 
over Q. Then in(J) ^ Z/2Z. 

Proof. Let £J be the elliptic curve 6AAI of [Cr] over Q, which has CM 
by Z[i]. Applying the results in [Ru] and using the data in Table 4 in [Cr], 
we find that Yil{E){p) is trivial for all odd primes p. A 2-descent then shows 
UI(i?) = 0. Another 2-descent shows that the 2-isogenous curve 64A3 of [Cr], 

E' : = {x - i){x'^ + ix - 28), 

has m{E') = 0.0 Let V be the Gq -module automorphism of E'[2] that 
interchanges the nonrational 2-torsion points. Then the quotient of E' x E' 
by the graph of ^/^ is a principally polarized abelian surface over Q, and it 
equals J, by Proposition 3 in [HLP]. It follows that III(J) = in(J)[2]. Since 
E has rank 0, so does J. A 2-descent on J as in [PS] shows that its 2-Selmer 
group has F2-dimension 3, but J(Q)/2J(Q) has F2-dimension only 2, so that 
UI(J)[2] = Z/2Z. See [St] for more on the implementation of the descent. □ 

Remarks. 1. The fact that J is odd in Proposition 27 could have been 
predicted in advance by Corollary 12, since X is deficient only at p = 3. 



^^The only reason for not applying Rubin's theorem directly to E' is that the needed data in [Cr] 
are given for only one elliptic curve in each isogeny class, which happened to be E in the case of 
interest. 
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2. Let J be as in Proposition 27. One might ask whether the prediction 
given by the Birch and Swinnerton-Dyer conjecture for the value of L{J, 1) will 
be off by a power of 2, for instance. The answer is no, since the conjecture has 
been checked for E and a theorem of Tate (see [Mi4, §1, Theorem 7.3]) implies 
that it holds for any abelian variety isogenous to E x E. 

Proposition 28. Let J be the Jacobian of the genus 2 curve 



over Q. Then III(J) is finite and (c, c) = 0, but c ^ 0. Hence III( J) has square 
order, but { , ) is not alternating on it. 

Proof. We have that J is (2, 2)-isogenous over Q to E x E where E is 
the rank elliptic curve = —37(2; + l)(5x — 32)(32x — 5), isomorphic to 
curve 30A2 in [Cr]. Kolyvagin's method [Ko] shows that III(£^) is finite, and 
a 2-descent shows that III(^)[2] = oM Hence III(J) is finite. Corollary 12 
shows that (c, c) = 0, since X(Qp) ^ for all p including oo. 

To show c 7^ 0, we perform a 2-descent on J as in [PS]. Since E has rank 0, 
J has rank 0. We compute that the (x — T) map injects J[2] into L*/L*^Q* 
(notation as in [PS]). Hence (x - T) : J(Q)/2J(Q) L*/L*'^Q* is injective, 
and Theorem 11.3 of [PS] shows that X cannot have a Q-rational divisor of 
degree 1, i.e., that the homogeneous space c = Pic^y^ is nontrivial. The final 
statements follow from Corollaries 9 and 7. □ 

All our examples of odd Jacobians so far have been for curves of even 
genus. Next we give a family of genus 3 examples. 

Proposition 29. Let p be a prime with p = —1 (mod 16). Let X be 
the genus 3 curve over Q given in projective coordinates by 



Then the Jacobian of X is odd. 

Proof. We use Corollary 12 and hope for an odd number of deficient places. 
Since X has good reduction at all finite primes except possibly 2 and p, we 
need only check for deficiency at oo, 2, and p. Any curve over R has real 
divisors of degree 2. Our curve X also has a Q2-rational point that lifts from 
(1:1:0) modulo 2'^. It remains to prove that X is deficient at p. 




37{x^ + l){5x^ - 32) (32x2 _ 



X ■.x'^+py^+ p^z^ = 0. 



^®The Birch and Swinnerton-Dyer conjecture predicts III(£') = 0, and this could probably be 
proved unconditionally by making Kolyvagin's method explicit. This together with the 2-descent on 
J would imply that m(J) S Z/2Z X Z/2Z. 
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If not, then X has a Qp-rational divisor of degree 2. Triphng the degree 
and applying Riemann-Roch yield an effective divisor of degree 6. Every par- 
tition of 6 includes a part that divides 6, so there exists an extension L with 
[L : Qp] = 6 for which there exists a point [xq : yo : zq) £ X{L). Let e and 
/ denote the ramification index and residue degree of L/Qp. If e were odd, 
then Xq, puq, P^Zq would have distinct valuations modulo 4. Therefore e = 2 
or e = 6. The valuation of py^ is distinct from the others modulo 4, so Xq and 
P^Zq have the same valuation, and the valuation of py^ is larger. Dividing by 
Xq, we find that 1 +p'^Zq/xq = modulo the maximal ideal; in particular — 1 
is a square in F^/. This is impossible, since p = —1 (mod 4), and / = 6/e is 
odd. □ 



Remark. Let J be the Jacobian of X in Proposition 29. We give here an 
unconditional proof that Itl(J) is finite, for p = 31, 47, and 79.B2I First, J is 
isogenous over Q to the product of the three CM elliptic curves 

^ : y2 ^ +x, 

E' : y'^ = x^ +px , 

E" : y"^ = x^ + p^x . 

Rubin's results [Ru] let one prove that Yil^E) is trivial. A numerical compu- 
tation for p = 31, 47, and 79 shows that oids=iL{E' , s) = oT:ds=iL{E" , s) = 1. 
Then Kolyvagin's method [Ko] gives a proof that III(£") and U1{E") are finite. 
Thus III( J) is definitely finite (and of nonsquare order) for these three p. 

Finally we give some function field examples. 

Proposition 30. Let J be the Jacobian of the genus 2 curve 

X ■.y'^ =Tx^ + x-aT 

over Fq{T), where q is odd, and a € F* \ F*^. IfYlI{J) is finite, then its order 
is twice a square. 



Proof. One easily checks that X is deficient only at the infinite prime of 

F,(r). □ 

Remark. There exists a (smooth, proper, geometrically integral) surface 
Y over F^ equipped with a morphism Y ^ over F^ whose generic fibre 



^'^The same argument should apply to any given p = — 1 (mod 16); it relies only on the fact 
that the analytic ranks of E' and E" in what follows are less than or equal to 1. This can be checked 
for any given such p, and should hold for every such p. (For instance, it would follow from the weak 
form of the Birch and Swinnerton-Dyer conjecture, since a 2-descent shows that the algebraic ranks 
arc less than or equal to 1.) 
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is X. Since y is a rational surface, Br(y) is finite [Mil]. It is likely that 
the finiteness of Br(y) can be proven to be equivalent to the finiteness of 
III(J). The literature (see [Mi2] for instance) appears to contain a proof of the 
equivalence only under additional hypotheses which do not hold here, but it 
seems that the proof would extend without much difficulty to the general case. 

11. An open question of Tate about Brauer groups 

Let X be a (geometrically integral, smooth, projective) surface over a finite 
field k of characteristic p. Because X is smooth, the Brauer group Br(X) may 
be identified with H?^{X, Gm)- 

Tate [Ta3, Th. 5.1] proved that for all primes i ^ p, Br(X)„d(£) is finite, 
and admits a nondegenerate antisymmetric pairing with values in Q/Z. He 
asked whether this pairing was alternating for all £ ^ p. Clearly the only 
case of interest is the case £ = 2 ^ p. Tate's question remains unanswered in 
general, although Urabe [Ur] has made substantial progress: he has proved that 
the pairing is alternating on the subgroup ker (Br(X)nd(2) — > Br(X^)n(i(2)), 
from which he deduces that the answer to Tate's question is yes whenever 
H^{Gk, H^^{X-^,Z2{l)))toTs = 0- Moreover, he has proved in general that the 
order of Br(X)nd(2) is a square. 

The same formalism as in our introduction and in Section 6 therefore 
gives an element c G Br(X)nd[2] with the property that {x,x + c) = for 
all X G Br(X)nd(2). Moreover Urabe's result about square order implies that 
(c,c) =0. 

If the answer to Tate's question is yes, then c should always be zero. Oth- 
erwise, one can hope for a more direct description of this canonically defined 
element of Br(X)nd[2], analogous to our description of c in the Shafaxevich- 
Tate group case in Section 4, and perhaps this would facilitate the construction 
of a counterexample showing that the Brauer group pairing is not always al- 
ternating. 

12. Appendix: Other definitions of the Cassels-Tate pairing 

Here we present two more definitions of the Cassels-Tate pairing, and 
then prove the compatibility of all the definitions we have introduced. The 
"Albanese-Albanese definition" is new, but the "Weil pairing definition" is 
well-known (sec [Mi4, p. 97]). 

In the following, we always tacitly assume that all choices are made in 
such a way that all the pairings are defined. It is not difficult to see that this 
is always possible. 
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12.1. The Albanese-Albanese definition. Let V and W be varieties over 
a global field k (conventions as usual), and suppose D € Div(y x W). One 
can simply mimic the construction in Section 3.2. Let A = Albyy^ and A' = 
Alb^y^j. We replace the second exact sequence in (3) by 

and use the pairings 

zO(T4scp) X y^Wksop) F"P* 

that agree on 3^*'(Va;scp) x y^{Wkscp) by Lang reciprocity. The same formalism 
as in Section 3.2 gives us a pairing 

{,)n: in(AlbO,/,) X m(AlbO^/,) Q/Z. 

The compatibility results we prove below will imply that ( , )d depends 
in fact only on the correspondence class of D, i.e., on the image of D in 
Pic(FxT^)/(7rfPicye7r|PicTy), where vri : V xW ^ V and Tr2 : V xW ^ W 
are the projections. 

12.2. The Weil pairing definition. Let A: be a global field of characteristic 
p (we may have p = 0), and let A be an abelian variety over k. Fix a positive 
integer m with p] m. Then the Weil pairing 

em : ^[m] X fc^^^P* 

can be defined as follows [Lai, p. 173].0 Given a G A[m] and a' G j4'^[m], 
choose a G Z^{AkBcp) and a' G Z^{A'^ k^^cp) summing to a and a', respectively, 
and letB 

em (a, a) := (ma) U a' — a U (ma'), 

where U is as in Section 12.1 for a Poincare divisor D G Div(74 x A'^). Let 
V denote the cup-product pairing associated to em- We now use em to define 
the Cassels-Tate pairing (a, a')weii for a G L[I(^) and a' G III(^'^) of order 
dividing m. 

Choose t G H^{A[m]) and t' G H^{A^[m\) mapping to a and a' respec- 
tively. Choose T G Z^{A[m]) and r' G Z^^A'^lm]) representing t and t' respec- 
tively. Choose a G C^{A[m?]) such that ma = r (i.e., so that a maps to r 



^^Our definition is the inverse of that in [Lai]. On the other hand, our convention for the 
polarization associated to a Une bundle is also opposite from that in [Lai], so that we obtain the 
same answer to the question, "If E is an elliptic curve over C corresponding to the lattice A = Z + Zr, 
if E is identified with its dual, and if P, Q G ^(C) correspond to 1/m, r/m € C/A, then what is 
em{P,Q)T' That answer (unfortunately?) is g-^'^V™. 

^^As usual, we write the group law in k'"'P* additively. 
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under ^[m^] ^ yl[m]). Then da takes values in ^[m], and da V r' represents 
an element of H^ik^^'P*) = 0, so that daVr' = de for some e G C^C^^^p*). 

Since = 0, wc can pick (3^ G A{k^^) such that d(3y cqTials the image 
of in Zi(G„, A(/cfP)). Choose e A(/cfP) such that mQ^ = fj^. Let 
= dQy be reconsidered as an element of Z^{Gy,A[m'^]). Note that ay — py 
takes values in A[m]. Then 

7v := i<7v - Pv) V - G C\Gy, kl^n 

is a 2-cocycle representing some 

cy G H\Gy,kl'n = Mkv) ^ Q/Z. 

Define 

(a,a')weii= X] inv^(^)- 

One checks that the value is well-defined, and unchanged if m is replaced by a 
prime-to-p multiple. 

One advantage of this definition is that it extends to a motivic setting: 

see [Fl], which also outlines a proof that the definition is independent of choices 
made. A disadvantage is that the construction does not let one immediately 
define the pairing on the p-part of 10, when k has characteristic p > 0. 

12.3. Compatibility. Let V he a, variety over a global field k, and 
let A = Alb^/fc. A choice of Pq G F(fc"^P) gives rise to a morphism 
(j) : Vfesep Ai^sep that induces isomorphisms independent of Pq that descend 
to k: <t>, : AlbO./^ ^ K\h\j^ and 0* : Pic^/fc,,ed ^ PiCy/fc,rcd- first result 
proves the equivalence of the Albanese-Picard pairings for V and for A. 

Proposition 31. For all a G ni(Alby/j.) and a' G ni(Pic^/^ ,.ed)' 

{a,(j)*a')v = {(t)*a,a')A- 

Proof. Let AlbMor(y, A) denote the free group on the collection of Al- 
banese morphisms il) : V^sep — > A^sep arising from choosing various basepoints 
Pq. There are then two ways of defining a G^-equivariant trilinear pairing 

3^°(Vfc.cp) X AlbMor(y, A) x Div"(Afcscp) — > F'^p*, 

either by using a generator ^ G AlbMor(V, ^4) to push forward 0-cycles from 
V to A, 

y'^iVks.p) X AlbMor(V", A) 3^°(^fe.ap), 

and then applying (2) for A, or by using ^ to pull back divisors on A to V, 
and then applying (2) for V. By the definition of (2), these trilinear pairings 
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clearly agree. Similarly we have 

Z\Vk^..) X AlbMor(F,^) x '^^^^ A;-p*, 

and we may use U for all the associated cup-product pairings without having 

to worry about ambiguity or nonassociativity. 

Choose Q G Z^{A{k''''P)) representing a, and lift a to a G C^{Z^{Vk^cp)). 
Choose a' € {A^ (k'^'^'P)) representing a', and lift a' to a' G CHDiv°(ylfesep)). 
We may then take a' as the element of C^(Div°(Vjksep)) required in the defi- 
nition of (a, (j)*a')v, and oU0 as the element of {Z^ (Ai^Bcp)) in the definition 
of {<p*a,a')A- The rj in the definition of {a,(f>*a')v then equals 

dal}{(j)l}a') - ayj d{(f) U a') 

and the corresponding element fj for (^*a, a') a is 

d{a U ^) U o' - (a U 0) U da'. 

A formal calculation shows that these are equal in C^{k^'^P*), so we may take 
the e's in the two definitions to be the same. 

Choose € A{kl'^P) such that dp^ = Oi;, and lift to b^, G Z'^ (Vf^^j^p) , 
which wc may push forward to U ^ G Z^{Ai^Bep) to serve as the correspond- 
ing "b„" required in the definition of {<p^a,a')A- The 7^ in the definition of 
{a,(t)*a')v then equals 

(a^ - dby) U ((/. U 0^) - b„ U d{(t) U a;) - 

and the corresponding clement for {(j)^a^a')A is 

((o^, U 0) - d{K U 0)) U 0^ - (b^ U 0) U da(, - 

Again, these are formally equal. Summing invariants over v completes the 
proof. □ 

Next we relate the Albanese-Picard definition to the homogeneous space 
definition. 

Proposition 32. Let A he an abelian variety over k, which we identify 
with Alb^/^. For all a G m(^) and a' G m(^V), 

{a, a') A = {a, a'). 

Proof. Let X be the homogeneous space of A corresponding to a. Then 
Alb^^j^. = ^, so that by Proposition 31, it will suffice to show 

{a,a')x = {a, a'). 

Choose P G X{k^^'P). For the definition of {a,a')x, we may take a = dP, 
reconsidered as an element of Z^{Z^{Xksej>)). Choose a' G C^(Div°(Xjtsep)) 
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representing a' . Then da' is the divisor of some /' € Z'^ (Jf^^ (^X)*) . The 
element G H'^{k^^*) in the homogeneous space definition is obtained by 
evaluating at any chosen G X{k^). In the definition of {a,a')x on the 
other hand, we may take b„ = P„ — G Z°(X^sep). Then da = d{dP) = 0, so 
that 

r/ = da U a' - U do' = -dP U /' = d{-P U /') 
and we may take e = —P U /'. Next, 

7u = {<^v - dbv) Ua'^-bvU da'^ - e„ 

= {dP, - d(p, - Q^)) u o; - (P. - Qv) uK- i-Pv u /;) 

= U 

and its cohomology class equals c^, as desired. □ 

Now we relate the Albanese-Picard definition to the Albanese-Albanese 
definition. 

Proposition 33. Let V and W be variefAes over a global field k, and sup- 
pose D G J}\Y(y xW). Then^D gives a homomorphism Z{Wkscp) — > Div(VA;sep), 
and we also denote by *D the induced homomorphism Alb^^^ Pic^^j^j.^^. // 
a G m(Alb^/j.) and a' G m(Alb^/fc), then 

{a,a)D = {a,^Da')v- 

Remark. If 1/ = ^4 is an abelian variety, ii W = , and if D ^ Div(74 x 
A^) is a Poincare divisor, then the induced homomorphism *D : — > is 
the identity, and we find that 

{a,a')D = {a, a') A = {a, a'). 

Proof. This follows formally from the fact that maps the second exact 
sequence in the pair used to define (a, a')D down to the second exact sequence 
in the pair used to define (a, ^Da')v- 

^ y^Wksep) > ^O(VFfcsep) > Alb^/^(F^P) y 



' fcsep. ' DivO(Vfc.ep) y PicO(14.scp) y 0, 

the fact that the first exact sequences in the two pairs are the same, and the 
fact that these maps of exact sequences respect the two pairs of pairings needed 
in the definitions. □ 



Finally we relate the Weil pairing definition to the Albanese-Albanese 
pairing definition. 
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Proposition 34. Let A be an abelian variety over a global field k, and 
let «P G Div(A X A^) be a Poincare divisor. If a e U1{A) and a' G III(A^) 
have order prime to the characteristic of k, then 

(a,a')q3 = (a,a')weil- 

Proof. We use notation consistent with that in Sections 12.1 and 12.2. 
Choose t, t', r, r', and cr as in the latter. Choose s G C^{Gk, Z^{Aksep)) 
representing a. Then we may take a to be the image of r in Z^(Gk, A{k^'^^)), 
and take o := ms. Choose a' G C^{Gk, Z^(Aksep)) representing r'. This 
determines r] and we choose e with de = rj. Since 

day t' -de = [(mds) U o' - ds U (ma')] - [da U a' - a U da'] 

= [da U a' - U (ma')] - [da U a' - (ms) U da'] 

= -ds U (ma') + s U d(ma') 

= -d{s U (ma')), 

we may take e = e — s U (ma'). 

Now for the local choices. Choose (3y such that = a^. (This is needed 
for both definitions.) Choose Qv, which determines p^. Choose q^, G 2^°(^j.jep) 
summing to Q^. Then we may take b„ = mq^. The difference between 

% = (cTv - Pv) yr^-Ey 

= {m{Sv - dq.o)) Ua'^- (s^, - dq.„) U (ma^) - £^ + 5„ U (ma(,) 
= (o„ - dbv) U a(, + (dq^) U {ma'J - £„ 

and 

Iv = (av - dbv) Ua'y-byU da'^ - 

= (at, - dbt,) U a^ - (mq^) U da^ - e„ 
is d(q^ U (mo^)), which is a 2-coboundary, as desired. □ 
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